Heap overflow

Heap-based buffer overflow in the QualifierList retrievequalifierlist function in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a long list name in a packet on port 8190...

CVE-2015-2899

Heap-based buffer overflow in the QualifierList retrievequalifierlist function in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to execute arbitrary code via a long list name in a packet on port 8190...

CloudBees Jenkins CI and LTS Denial of Service Vulnerability

CloudBees Jenkins CI formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A security vulnerability exists in CloudBees Jenkins CI versions prior to 1.600 and LTS versions prior to 1.596.1. A remote attacker can...

CloudBees Jenkins CI and LTS Scripting Vulnerabilities

CloudBees Jenkins CI formerly known as Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. LTS Long-Term Support is a long-supported version of CloudBees Jenkins CI. A security vulnerability exists in the Combination filter Groovy script in CloudBees Jenkins CI...

CloudBees Jenkins CI and LTS Cross-Site Scripting Vulnerability

CloudBees Jenkins CI formerly known as Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. LTS Long-Term Support is a long-supported version of CloudBees Jenkins CI. A cross-site scripting vulnerability exists in CloudBees Jenkins CI versions prior to 1.606 and LT...

CloudBees Jenkins CI and LTS API token-issuing service vulnerability

CloudBees Jenkins CI formerly known as Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. LTS Long-Term Support is a long-supported version of CloudBees Jenkins CI. A security vulnerability exists in the API token-issuing service in CloudBees Jenkins CI versions...

UBUNTU-CVE-2015-7855

The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service assertion failure via a 6 or mode 7 packet containing a long data value...

The vulnerability of the Allied Telesyn TFTP Server allows a intruder to cause a service failure or execute arbitrary code.

The vulnerability of the Allied Telesyn TFTP Server arises due to an overflow in the buffer on the stack. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code when processing requests containing long file names in the Allied Telesyn TFTP Serve...

press.uchicago.edu XSS vulnerability

Open Bug Bounty ID: OBB-92656 Description| Value ---|--- Affected Website:| press.uchicago.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SUSE: Security Advisory for spice (SUSE-SU-2015:0884-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Konica Minolta FTP Utility Denial of Service Vulnerability

KONICA MINOLTA FTP Utility is a software used by KONICA MINOLTA copiers. Konica Minolta FTP Utility 1.0 is implemented with a buffer overflow vulnerability. A remote attacker could cause a denial of service application crash by exploiting this vulnerability via a longer USER command...

Mitsubishi Electric MELSEC FX3G PLC Device Resource Management Error Vulnerability

The Mitsubishi Electric MELSEC FX3G PLC is a programmable logic controller PLC product of the MELSEC FX series from Mitsubishi Electric Japan. A security vulnerability exists in the HTTP application of the Mitsubishi Electric MELSEC FX3G PLC device for products prior to the 2015.4 date. A remote...

DEBIAN-CVE-2015-5957

Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact via a long name...

Buffer overflow

Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact via a long name...

UBUNTU-CVE-2015-5957

Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact via a long name...

CVE-2015-5957

Buffer overflow in the DumpSysVar function in var.c in Remind before 3.1.15 allows attackers to have unspecified impact via a long name...

Stack overflow

Multiple stack-based buffer overflows in an unspecified DLL file in Advantech WebAccess before 8.020150816 allow remote attackers to execute arbitrary code via a crafted file that triggers long string arguments to functions...

HPSBHF03513 rev.2 - HP PCs and Workstations running Windows and Linux with NVIDIA Graphics Driver, Local Denial of Service (DoS), Elevation of Privilege

Potential Security Impact Denial of Service DoS, elevation of privilege VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with certain HP PCs and workstations with Windows and Linux running the NVIDIA Graphics Driver. The vulnerabilities could be locally exploited...

CVE-2015-5993

Buffer overflow in form2ping.cgi on Philippine Long Distance Telephone PLDT SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN and Kasda KW58293 devices allows remote attackers to cause a denial of service device outage via a long ipaddr parameter...

Phillipine Long Distance Telephone SpeedSurf 504AN and Kasda KW58293 Cross-Site Scripting Vulnerabilities

The Phillipine Long Distance Telephone PLDT SpeedSurf 504AN and the Kasda KW58293 are modem and router all-in-one units. The PLDT SpeedSurf 504AN and Kasda KW58293 form2WlanSetup.cgi page fails to adequately filter the 'ssid' parameter, allowing a remote attacker to exploit the vulnerability by...